Splunk Search

How can I find out the length of a line in a log file?

approachct
Path Finder

We have a CSV file that we import into splunk daily. We have at least one line that is too long and is possibly corrupted. How can I find out the maximum line length of a raw event in the CSV. That is to say, the length of the full line, not the length of the individual fields in the CSV.

Tags (2)
0 Karma

southeringtonp
Motivator

Assuming single-line events, eval can do it:

| eval line_length=len(_raw)
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...